A memory corruption flaw in the Linux kernel AppArmor subsystem poses a high security risk, potentially allowing an authenticated local attacker to escalate privileges or cause system instability.

The vulnerability exists in the aa_vec_unique function within the AppArmor module, where improper handling of label vectors results in an out-of-bounds write. An authenticated local attacker can trigger this flaw by interacting with specific kernel interfaces, such as /proc/self/attr/apparmor/current.

The vulnerability carries a CVSS score of 7.8, indicating a high severity risk. Successful exploitation allows an attacker with local access to perform unauthorized memory writes, which can lead to system crashes, denial of service, or the potential for privilege escalation, compromising the integrity and confidentiality of the host operating system.

Immediate Action: Administrators should update the Linux kernel to version 6.12.109, 6.18.50, 7.2.4, or later immediately.

Proactive Monitoring: Monitor system logs for unexpected kernel oops or segmentation faults related to AppArmor or process attribute changes.

Compensating Controls: Restrict access to sensitive procfs interfaces for non-privileged users where possible and ensure that security modules are configured with the principle of least privilege.

Public Exploit Available: Unknown

Given the potential for local privilege escalation and the critical nature of kernel-level vulnerabilities, organizations should prioritize patching affected systems. Applying the provided kernel updates is the only reliable way to eliminate the underlying memory corruption risk.